Vulnerability Summary for the Week of January 19, 2026

High Vulnerabilities

Primary
Vendor — Product
Description Published CVSS Score Source Info Patch Info
Agatasoft–AgataSoft PingMaster Pro AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature that allows attackers to crash the application by overflowing the host name input field. Attackers can generate a 10,000-character buffer and paste it into the host name field to trigger an application crash and potential system instability. 2026-01-23 7.5 CVE-2021-47893 ExploitDB-49567
Vendor Homepage
VulnCheck Advisory: AgataSoft PingMaster Pro 2.1 – Denial of Service
 
Aida Computer Information Technology Inc.–Hotel Guest Hotspot Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection. This issue affects Hotel Guest Hotspot: through 22012026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2026-01-22 8 CVE-2025-4764 https://www.usom.gov.tr/bildirim/tr-26-0001
 
Altium–AES AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from Bulletins

Read the original article: